# CASCA evidence receipt — CVE-2023-36847

- Generation: `gen-409cbd0c74ff4feb70e4944e6b98ce40`
- As known: 2026-07-21T08:13:17.697275+00:00
- Comparison: gen-56ccdaf914f7b4be95b689ccae7dc20d
- Score policy: public-priority-v1.0.1
- Conflict: not observed in this generation

## Source assertions

- **CISA-ADP** (independent_enrichment): container — CISA ADP Vulnrichment
  - Observed: 2026-07-19T04:27:06.398189+00:00
  - Citation: https://www.cve.org/CVERecord?id=CVE-2023-36847
- **CVE** (derivative_copy): container — CVE Program Container
  - Observed: 2026-07-19T04:27:06.398189+00:00
  - Citation: https://www.cve.org/CVERecord?id=CVE-2023-36847
- **juniper** (original_assertion): container — Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
  - Observed: 2026-07-19T04:27:06.398189+00:00
  - Citation: https://www.cve.org/CVERecord?id=CVE-2023-36847
- **CISA KEV** (original_assertion): observed_exploitation — Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability
  - Observed: 2026-07-19T04:54:04.25158+00:00
  - Citation: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- **FIRST EPSS** (original_assertion): model_probability — Probability 0.846920000000; percentile 0.996810000000
  - Observed: 2026-07-19T04:54:35.756809+00:00
  - Citation: https://www.first.org/epss/data_stats.html

## CVSS assessments

- **nvd@nist.gov** (Primary, CVSS 3.1): 5.3 — score eligible
  - Evidence class: nvd_enrichment_exact; source rank: 0
  - Validation: valid_match
  - Vector: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N`
- **sirt@juniper.net** (Secondary, CVSS 3.1): 5.3 — score eligible
  - Evidence class: exact_record_cna; source rank: 1
  - Validation: valid_match
  - Vector: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N`
- **juniper** (unknown, CVSS 3.1): 5.3 — display only
  - Evidence class: direct_cve_record_display_only; source rank: not applicable
  - Validation: display-only direct record assessment
  - Vector: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N`

## Applicability scope

- **Juniper Networks · Junos OS** (direct_source; unknown)
  - Versions: [{"status": "affected", "version": "0", "lessThan": "20.4R3-S8", "versionType": "semver"}, {"status": "affected", "version": "21.1", "lessThan": "21.1*", "versionType": "semver"}, {"status": "affected", "version": "21.2", "lessThan": "21.2R3-S6", "versionType": "semver"}, {"status": "affected", "version": "21.3", "lessThan": "21.3R3-S5", "versionType": "semver"}, {"status": "affected", "version": "21.4", "lessThan": "21.4R3-S4", "versionType": "semver"}, {"status": "affected", "version": "22.1", "lessThan": "22.1R3-S3", "versionType": "semver"}, {"status": "affected", "version": "22.2", "lessThan": "22.2R3-S1", "versionType": "semver"}, {"status": "affected", "version": "22.3", "lessThan": "22.3R2-S2, 22.3R3", "versionType": "semver"}, {"status": "affected", "version": "22.4", "lessThan": "22.4R2-S1, 22.4R3", "versionType": "semver"}]
- **juniper · ex2200** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-c74392df4887de607ea63ec2a1359df06d7f576f2f48e82f211148d473e263f0`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex2200:-:*:*:*:*:*:*:*`
- **juniper · ex2200-c** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-7a8ad787e5a98b6a86f3d1d0b92692979e3f15555a984c2c6a19fe303f55d565`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex2200-c:-:*:*:*:*:*:*:*`
- **juniper · ex2200-vc** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-222b3061e728a78053905caf9484afcda1aaeffd1cbc29fc7dfbe492f880f41e`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex2200-vc:-:*:*:*:*:*:*:*`
- **juniper · ex2300** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-6b2f3e8b90b79725c18446c56defb4811ec4345d40a3046f0cebcc44d3af6991`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex2300:-:*:*:*:*:*:*:*`
- **juniper · ex2300-24mp** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-3fa78f1d8704ffa256936c666af7a6f80e8b17b77fa7237a59f51bdac4391641`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex2300-24mp:-:*:*:*:*:*:*:*`
- **juniper · ex2300-24p** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-aae7fe243bcab688fbbc960944716f7fcf35dcef93e0230d2ac1dfb7e28a47bc`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex2300-24p:-:*:*:*:*:*:*:*`
- **juniper · ex2300-24t** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-1fc636937fd0b5357c78d3169868c5a1528971ea4da9b5b4168f026735309331`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex2300-24t:-:*:*:*:*:*:*:*`
- **juniper · ex2300-48mp** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-16aa3e7f8a714e0fb6915ca7f2930baf616298686c8f2d4c5953d19c25eb9143`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex2300-48mp:-:*:*:*:*:*:*:*`
- **juniper · ex2300-48p** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-7b86de7888df362cfa4378af6e249d5a9cf808d021412bc82c5829fe658712cf`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex2300-48p:-:*:*:*:*:*:*:*`
- **juniper · ex2300-48t** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-cdc2adc344d068c203237176621ded0a21bd5f3b407e8abd3a1ea3379e4ae14a`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex2300-48t:-:*:*:*:*:*:*:*`
- **juniper · ex2300-c** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-f066083d632d0f1a9c6f96271242480a4142437ab9973cbcfcad3cae71751e36`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex2300-c:-:*:*:*:*:*:*:*`
- **juniper · ex2300m** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-5ad515eca29c1f5b0351cef49c589986a6518a96c17e567e6ceaad237cbe955e`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex2300m:-:*:*:*:*:*:*:*`
- **juniper · ex3200** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-7422d5a52ebcb7e88a13ab18d11ce47fa6c3be8fb5b011849869e070bf135c55`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex3200:-:*:*:*:*:*:*:*`
- **juniper · ex3300** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-1abfca3a6c274874713a26146820769dbceb4a2ba834283ad64d3a7fcef6ed9d`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex3300:-:*:*:*:*:*:*:*`
- **juniper · ex3300-vc** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-b3ce8261e3b249b2135dad8060acc9699913268c6857e76d06705924be1d82d0`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex3300-vc:-:*:*:*:*:*:*:*`
- **juniper · ex3400** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-7f03639aeb9ee1b3dfd792746a30ed7c82130975cd3f401beed2fc2ec0b5ee7f`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex3400:-:*:*:*:*:*:*:*`
- **juniper · ex4200** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-8afb7d0ce341d34731eefae6cfa3ca932750260e09b54ca0e3b508bff06a2739`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4200:-:*:*:*:*:*:*:*`
- **juniper · ex4200-vc** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-ff38da15b8d14212575af8f64cbe6c772d6dbe8f9fed72d61bbc6485c75a9b63`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4200-vc:-:*:*:*:*:*:*:*`
- **juniper · ex4300** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-0db9202cb4aada050637475daed594d48ffbea72908d2ee719b1e3f1b5e25c46`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:*`
- **juniper · ex4300-24p** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-84dd25d53466195810943ae6223adbb6f9a7d82c13e895f288722ff83e4980f1`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300-24p:-:*:*:*:*:*:*:*`
- **juniper · ex4300-24p-s** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-68d8c27c0eb42592eb31db18b9e26d2c05f3d910df9937c2bb16e947c0328359`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300-24p-s:-:*:*:*:*:*:*:*`
- **juniper · ex4300-24t** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-c4ff90cbc679140327f46aeae24b7eccdc3bc4865ef1a7ce639ff54273776a69`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300-24t:-:*:*:*:*:*:*:*`
- **juniper · ex4300-24t-s** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-6152a07d6aff2d98c7fb2c8e66e0375e4a28a75e3b920cef7d35b1185ad895c6`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300-24t-s:-:*:*:*:*:*:*:*`
- **juniper · ex4300-32f** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-60e399600b00f97a1afce6c7715cc91ec4f94708def0d17047f52e5710ff29f3`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300-32f:-:*:*:*:*:*:*:*`
- **juniper · ex4300-32f-dc** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-cde0dce7a8a0190e4b58a7eaef2b725b9d503f6ffa5955bc901a3e8cdc42f35d`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300-32f-dc:-:*:*:*:*:*:*:*`
- **juniper · ex4300-32f-s** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-59f13f5e193d41cf8148cea2a59c8299364ce4011c8d3204f752fb03f5808602`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300-32f-s:-:*:*:*:*:*:*:*`
- **juniper · ex4300-48mp** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-1bc5e8ebf2ddef68f9a0303b2af0b96889fb9d02899a29bcda4bc4e6b2aa1e36`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300-48mp:-:*:*:*:*:*:*:*`
- **juniper · ex4300-48mp-s** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-713c70783ab2b06c809fd354cd2a03bab52a64730833d77124497a35d02d7644`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300-48mp-s:-:*:*:*:*:*:*:*`
- **juniper · ex4300-48p** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-ffe963ee8bca2d321a5f1b304f50e7bfe346154e40e147bf4d3fd5e1fc3b1860`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300-48p:-:*:*:*:*:*:*:*`
- **juniper · ex4300-48p-s** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-edea1200cd80b21cba73f39c4743aa871217f0c824b7ba59683875c4c04b7326`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300-48p-s:-:*:*:*:*:*:*:*`
- **juniper · ex4300-48t** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-ae0ad943855c79be7d82e298c517812147fd7768b4468beca775c96d93a3ad24`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300-48t:-:*:*:*:*:*:*:*`
- **juniper · ex4300-48t-afi** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-d0c999eb4fb0891dc91cc729d7cb325eabe5f6869607fba8a5741bb093745467`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300-48t-afi:-:*:*:*:*:*:*:*`
- **juniper · ex4300-48tafi** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-706798fd24219af9a03b8b59158782091c6faafae0b853e22fb5ea1947b6068a`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300-48tafi:-:*:*:*:*:*:*:*`
- **juniper · ex4300-48t-dc** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-0e28d8dff97c0919834e60b4aec45369f67b301aebe933aaf65f9d6996ae3e94`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300-48t-dc:-:*:*:*:*:*:*:*`
- **juniper · ex4300-48tdc** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-0baf68968b9cbd0c5e832f7f046f7d3904dcbdc00f2adceffb6a63560c65bac7`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300-48tdc:-:*:*:*:*:*:*:*`
- **juniper · ex4300-48t-dc-afi** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-320c9a32443480dd92add24ec43b0275bda9bd59c78ead00f5ec487b614a9581`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300-48t-dc-afi:-:*:*:*:*:*:*:*`
- **juniper · ex4300-48tdc-afi** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-ff6412bf3d1bc641753f36788092672be17e746b8ccd67ecce4f24ab205ddc6a`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300-48tdc-afi:-:*:*:*:*:*:*:*`
- **juniper · ex4300-48t-s** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-9705ae9fc00932305a15ff093ce751827d745e2035340ab90b24c0e5776d251c`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300-48t-s:-:*:*:*:*:*:*:*`
- **juniper · ex4300m** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-88cb858c3ab00d746efbbf84f3048347a8d4b17eb983c13f52f8d6f130cace66`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300m:-:*:*:*:*:*:*:*`
- **juniper · ex4300-mp** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-01851f13b295e4f2fe3939af78f260e1054e1e5ca7b132d8167d01c21de5ec32`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300-mp:-:*:*:*:*:*:*:*`
- **juniper · ex4300-vc** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-d920395a2c95ee6f3089eaee8c73e699b849a3e4a96df138e4939bc3b5a8e42e`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4300-vc:-:*:*:*:*:*:*:*`
- **juniper · ex4400** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-39a4058d2da29cde70414626d0a6bf4e01d1694395d13124786ba716860522dc`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4400:-:*:*:*:*:*:*:*`
- **juniper · ex4500** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-2e680e63d9824d98bcea3df9d7f5ce8c810a9f416c339c194fc84430ecd6c4d0`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4500:-:*:*:*:*:*:*:*`
- **juniper · ex4500-vc** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-491de95b314a122a44fa23169332f419c310071c218e757facd63c4ee852ebfb`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4500-vc:-:*:*:*:*:*:*:*`
- **juniper · ex4550** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-cb1baac6be60a94b1ff91046d286f449af256fed91a846c565b964f0cb75c654`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4550:-:*:*:*:*:*:*:*`
- **juniper · ex4550-vc** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-f9e00ef35864969ac28871b9bbdf96b655f848f1e0f85b0d8e9ec0c54d12a2da`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4550-vc:-:*:*:*:*:*:*:*`
- **juniper · ex4550/vc** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-a18e66bb15269e6e1eb218986b8b64c4fb1895f5b97364f24079d7c056e9a02a`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4550\/vc:-:*:*:*:*:*:*:*`
- **juniper · ex4600** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-6686edf50b170f8662488c8b1d2d0cb7e4729ae6ebbe59d09f1e33eb8e4ab0bf`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*`
- **juniper · ex4600-vc** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-03064ffbd185e11c409336fa7b898c1729e29b5a5df5b42e043b7092214a9266`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4600-vc:-:*:*:*:*:*:*:*`
- **juniper · ex4650** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-e1f3829d1a68a883c7da45db5f7e985e120bb93dff919a2c3cc8c1558c4a3fdb`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex4650:-:*:*:*:*:*:*:*`
- **juniper · ex6200** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-ce5c9a2cb2b5fcd3b79f8f7650acd42ea5a963be71bd3ecc8f79459e2a722756`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex6200:-:*:*:*:*:*:*:*`
- **juniper · ex6210** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-ca69550d09d6142c3e172161a944870ff235d1386128b0d2db6f4c19ef23f95e`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex6210:-:*:*:*:*:*:*:*`
- **juniper · ex8200** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-5075a4e7b8b67d12f48f979ce90e5949d007f88a123d2fa6750dc1069f6ae308`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex8200:-:*:*:*:*:*:*:*`
- **juniper · ex8200-vc** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-5f3b7578130e2535b861a3d48ba8d2fce2e766e0bf7ea36e7c23b3c8deb9c168`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex8200-vc:-:*:*:*:*:*:*:*`
- **juniper · ex8208** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-d4abc3b6297a183ef0c5f4c1d8dce1a52dfcbce28d10195b474762dc9275107d`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex8208:-:*:*:*:*:*:*:*`
- **juniper · ex8216** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-1815118bcce8b54fe0595e508742d880dcba739a9a3356626fb03debba6d17c5`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex8216:-:*:*:*:*:*:*:*`
- **juniper · ex9200** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-c27e1e83af0972b29fe6e4f5a66e0843b7ec04d71a9908631e19364bd9072957`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex9200:-:*:*:*:*:*:*:*`
- **juniper · ex9204** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-2abf32b4e843055abc0d21d8796558a4955acbe27afccf6937c101c57902b8d6`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex9204:-:*:*:*:*:*:*:*`
- **juniper · ex9208** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-1977338d2ab865f3310e919cfb99bee632728aa99256b33d0f239e8b146738ab`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex9208:-:*:*:*:*:*:*:*`
- **juniper · ex9214** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-fe82d183340b920ba2af9cd56a9be5b9470e894d38c5f22ec6544c105874eb1d`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex9214:-:*:*:*:*:*:*:*`
- **juniper · ex9250** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-9faef2868f64e6679969d24a313309ad3de031bc18caaf05892d40946cc69bd5`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex9250:-:*:*:*:*:*:*:*`
- **juniper · ex9251** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-e85bd1f8a7a9a4075ba91e36fa80df07c5e7982f3e03c40d15769aeae91d60d3`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex9251:-:*:*:*:*:*:*:*`
- **juniper · ex9253** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-29945f417e1a3b90545674d47537d3796bfd9210bf12d4e218333eb624edfe82`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:ex9253:-:*:*:*:*:*:*:*`
- **juniper · junos** (vulnerable_target; supported)
  - Versions: Any version (unconstrained) (< 20.4); Version 20.4; Version 21.1; Version 21.2; Version 21.3; Version 21.4; Version 22.1; Version 22.2; Version 22.3; Version 22.4
  - Canonical identity: `product-7cd283e8e07c377a714f066def688e2c997bf1391107ad32edecea8a128ac327`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:r3-s4:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r3-s6:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.3:-:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.1:r3-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.3:r1-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.3:r2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.2:r3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.2:-:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:r3-s3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.1:r3-s4:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.1:r3-s5:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r3-s5:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.4:-:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r3-s4:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.1:-:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.3:r2-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r3-s5:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r3-s7:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.1:r3-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*`

## Identity source boundaries

- **cpe_dictionary**: 1775266 records through 2026-07-21T06:45:29.809553+00:00
  - Run: `27d65b0f-b718-4b4f-bb79-c47c68d09dfa`
- **cpe_match**: 643502 records through 2026-07-21T08:13:17.697275+00:00
  - Run: `955dae73-7302-438b-aee1-058d7cc5d48e`

## Limitations and unknowns

- KEV membership is authoritative for the catalog, not proof of exposure in any environment.
- EPSS is a dated model probability and not an individual-environment prediction.
- Affected or fixed status applies only to the exact cited product and version scope; unresolved scope remains unknown.
- NVD-carried upstream facts remain derivative and are not independent corroboration.
- Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
- NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
- Factor D remains unknown because WC-03 has not converted canonical CPE mappings into generation-bound mapping obligations; canonical identity alone does not score applicability.
- Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.

Generated from CASCA normalized evidence. This receipt is not proof that an asset is affected, unaffected, safe, or fixed.